Cybersecurity and CUI Safeguarding Compliance

The contract requires the implementation and ongoing maintenance of cybersecurity controls as specified in NIST SP 800-171 for all systems that handle Controlled Unclassified Information. This includes establishing, documenting, and sustaining technical and administrative safeguards to protect the confidentiality, integrity, and availability of CUI across the contractor’s information systems. Compliance with these controls is mandatory and must be continuously monitored to ensure adherence to federal standards for information security. Additionally, the contract mandates compliance with FAR 52.204-7012, requiring immediate reporting of any cyber incidents affecting CUI to the Department of Defense. This includes notifying appropriate authorities within the specified timeframes, preserving evidence, and cooperating with investigations. The work is categorized under NAICS code 541512, reflecting its focus on computer systems design services, and is structured as a subcontract under the Defense Logistics Agency, part of the Department of Defense, with performance expectations tied to federal cybersecurity directives.